AWS-02 · CCoE Cloud Architect — Architecture & Security

Socket.dev; Irvine (CA); On-site; USD 140,000 - 200,000; Full time

Job summary

Megazone US is seeking an experienced Cloud Security Architect to lead landing-zone and security standards for enterprise-scale AWS environments. You will own multi-account architectures, enforce guardrails, and drive vulnerability and compliance across the cloud estate.

You will review business-unit requests, collaborate with global stakeholders, and communicate risk decisions clearly in Korean and English. This onsite role is based in Irvine, CA.

Qualifications

• 7+ years in cloud infrastructure, including 4+ years designing on AWS at enterprise scale (multi-account, multi-VPC).
• Ownership of an AWS multi-account landing zone — Control Tower or equivalent with guardrails and account vending.
• Deep AWS security: IAM policy design, SCPs, KMS, VPC security architecture, centralized logging and AWS security services.
• Track record of governing other teams’ designs: architecture review, standards enforcement, constructive refusal.
• Professional fluency in Korean and English.
• Able to work onsite in Irvine, CA.

Responsibilities

• Own landing-zone and account architecture standards — account structure, organizational units, networking, identity, logging and guardrails.
• Review business-unit architectures and change requests, and approve, reject or improve them against the standard.
• Own security architecture: IAM and least privilege, encryption, boundary protection, secrets handling and the security baseline every account is measured against.
• Drive vulnerability and compliance posture across the estate (Security Hub, GuardDuty, Config, Inspector) and push remediation through the operations team.
• Produce the reference patterns and documentation that platform and operations engineers build from.
• Act as senior technical escalation for architecture and security incidents.
• Explain architecture and risk decisions to Korean-speaking client and HQ stakeholders, in writing and in meetings.

Skills

AWS architecture

Security architecture

Governance & policy

VPC & networking

Bilingual: Korean/English

Landing zone design

Tools

Control Tower

GuardDuty

Security Hub

Config

KMS

Job description

The role

Megazone US is an AWS Premier Tier Services Partner and part of MegazoneCloud, headquartered in Seoul. This seat joins a dedicated 22-person team delivering a multicloud managed service — AWS, Azure and Google Cloud across roughly 155 cloud accounts — to a major automotive enterprise client and its business units. You are the architecture and security authority inside the client’s Cloud Center of Excellence: you set the standard for how AWS accounts are built and secured, you review what the business units want to deploy, and you are the person who decides whether a design is safe to run.

What you will do

• Own landing-zone and account architecture standards — account structure, organizational units, networking, identity, logging and guardrails.

• Review business‑unit architectures and change requests, and approve, reject or improve them against the standard.

• Own security architecture: IAM and least privilege, encryption, boundary protection, secrets handling and the security baseline every account is measured against.

• Drive vulnerability and compliance posture across the estate (Security Hub, GuardDuty, Config, Inspector) and push remediation through the operations team.

• Produce the reference patterns and documentation that platform and operations engineers build from.

• Act as senior technical escalation for architecture and security incidents.

• Explain architecture and risk decisions to Korean‑speaking client and HQ stakeholders, in writing and in meetings.

What we need — must have

• 7+ years in cloud infrastructure, including 4+ years designing on AWS at enterprise scale (multi‑account, multi‑VPC).

• Demonstrable ownership of an AWS multi‑account landing zone — Control Tower or an equivalent custom build — including guardrails and account vending.

• Deep AWS security: IAM policy design, SCPs, KMS, VPC security architecture, centralized logging and the AWS security services.

• Track record of governing other teams’ designs: architecture review, standards enforcement, saying no constructively.

• Professional working fluency in Korean and English.

• Able to work onsite in Irvine, CA.

Nice to have

AWS Solutions Architect Professional or Security Specialty MSP or consultancy background Automotive, manufacturing or Korean‑affiliated enterprise experience SOC 2 / ISO 27001 / NIST control mapping Working knowledge of Azure and Google Cloud security

Working pattern — please read before applying

• Core hours are standard US Pacific business hours, onsite in Irvine.